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IN THE CLAIMS 

Please amend the claims as follows. 



1. (Currently Amended) A method of controlling content usage in a wireless 
communication device having two or more processors using a decryption key that is divided into 
at least first, second and third key-shares, the method comprising: 

pre-storing the third key-share in the wireless communication device; 

providing the wireless communication device the first key-share in response to a request 
for content; 

v e rifying cr e dit of a us e r of th e wir e l e ss communication d e vic e ; and 

providing the wireless communication device the second key-share when-the credit of a 
user of the wireless communication device is verified, 

wherein upon receipt of the content, by a security processor of the wireless 
communication device combines the first and second key-shares with the third key-share-tfeat 
was pr e stor e d in th e wir e l e ss communication d e vic e for use in decrypting the content, and 

wherein the security processor further monitors usage of the content and purges at least 
one of the key shares when usage of the content exceeds one or more measurement parameters, 

wherein the security processor further authenticates the measurement parameters using an 
authentication code to help prevent tampering with the measurement parameters, 

wherein the decrypted content is provided to a communication processor of the wireless 
communication device for playing, and 

wherein the measurement parameters are secured by the authentication code and provided 
by a security server over a wireless link along with encrypted content. 

wh e r e in th e first, s e cond and third k e y shares ar e associat e d with th e us e r and compris e a 
privat e d e cryption k e y of th e us e r. 



2. (Currently Amended) The method as claimed in claim 15 wherein the method includ e s : 
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the security processor purges at least one of the key shares when usage of the content 
exceeds a service limit indicated by the measurement parameters or when the authentication code 
fails to authenticate. 

monitoring usag e of th e cont e nt with th e s e curity proc e ssor of th e wir e l e ss 
communications d e vice; and 

purging at l e ast on e of th e k e y - s har e s from th e wirel e ss communication d e vic e wh e n th e 
usag e e xc ee ds on e of a s e t of m e asur e m e nt param e t e rs stor e d in the p e rsonal communications 
d e vic e of th e s e t . 



3. (Previously Presented) The method as claimed in claim 2 further comprising: 
receiving the request for the content from the wireless communication device, the request 

identifying the content and the measurement parameters for the content; and 

encrypting the content in the security server with an encryption key corresponding to the 
decryption key, 

wherein the third key-share is pre-stored in the wireless communication device prior to 
encrypting the content. 

4. (Currently Amended) The method as claimed in claim 15 further comprising: 

in response to verification of the user's credit, receiving the content from a content server 
at the security server; 

encrypting the content in the security server with an encryption key corresponding to the 
decryption key; and 

providing the encrypted content from the security server to the wireless communication 
device over the [[a]]wireless communication link. 

5. (Previously Presented) The method as claimed in claim 4 wherein the content server 
and the security server communicate over a non-secure network, and 

wherein the method includes the content server adding security to the content prior to 
providing the content to the security server. 
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6. (Previously Presented) The method as claimed in claim 4 wherein the providing the 
first of the key-shares is performed by the security server over the wireless link in response to 
either the receipt of content at the security server or the encryption of the content by the security 
server in communication with the wireless communication device. 



7. (Currently Amended) The method as claimed in claim 1 wherein the third key-shares is 
pre-stored in a subscriber identity module (SIM) associated with the user, 

wherein a fourth of the key-shares is pre-stored in the wireless communication device and 
associated with the [[a]] security processor of the wireless communication device, and 

wherein the security processor combines the first, second, third and fourth key-shares to 
generate the decryption key and decrypt the encrypted content. 

8. (Previously Presented) The method as claimed in claim 1 wherein the verifying credit 
of the user and the providing the second of the key-shares to the wireless communication device 
are performed by a finance server in communication with the wireless communication device. 

9. (Previously Presented) The method as claimed in claim 1 further comprising 
generating the key-shares from the decryption key using a key-splitting technique. 

10. (Previously Presented) The method as claimed in claim 2 wherein the content 
comprises at least one of either video content or music content. 

1 1 . (Previously Presented) The method as claimed in claim 2 further comprising 
generating the set of measuring parameters comprising at least one of a date-limit, a run-time 
limit, and an iteration limit, and 

wherein the wireless communication device monitors usage of the content with respect to 
the measurement parameters and purges at least one of the key-shares when the usage exceeds 
one of the measurement parameters of the set. 
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12. (Previously Presented) The method as claimed in claim 1 1 further comprising a 
content server defining the set of measurement parameters based on preferences of a content 
provider. 

13. (Previously Presented) The method as claimed in claim 1 1 wherein the date-limit 
defines an end calendar date for playing the content, 

wherein the run-time limit defines a maximum amount of time for playing portions of the 
content, and 

wherein the iteration limit defines a maximum number of times for playing the content or 
portions thereof. 



14. (Cancelled) 



15. (Currently Amended) The method as claimed in claim 1 wherein the wireless 
communication device receives the first and second of the key-shares over [[a]] the wireless 
communication link, and 

wherein the third key-share is pre-stored in the wireless communication device prior to 
the user generating the request for the content and prior to a security server sending the content 
and the second key-share to the wireless communication device. 

16. (Currently Amended) A multiprocessor p rocessing system for a wireless 
communication device, the processing system comprising: 

a security processor portion to combine first, second and third key-shares to generate a 
decryption key to decrypt content for the processing system, the security processor portion 
including a to monitor for usage of the content construct e d and arrang e d to purge at least one of 
the key-shares when the usage exceeds a measurement parameter; and 

a communications processor portion to play rec e iv e decrypted content received from the 
security processor portion and providing d e crypt e d cont e nt for playing on th e wir e l e ss 
communication d e vic e, 
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wherein the wireless communication device has the third key-share pre-stored therein and 
receives the first key-share and the second key-share over a wireless link in response to a request 
for content and a verification of a user's credit^ 

wherein the security processor authenticates the measurement parameters with an 
authentication code to help prevent tampering with the measurement parameters, and 

wherein the measurement parameters are secured by the authentication code and provided 
by a security server over the wireless link along with the encrypted content or when the 
authentication code fails to authenticate. 



17. (Currently Amended) The processing system as claimed in claim 16 wh e r e in th e 
m e asur e m e nt param e t e rs hav e an auth e ntication cod e associat e d th e r e with, and 

wherein the security processor portion purges at least one of the key-shares when-the 
auth e ntication cod e fails to auth e nticat e when usage of the content exceeds a service limit 
indicated by the measurement parameters . 

18. (Currently Amended) The processing system as claimed in claim 16 wherein the 
security processor portion has the third key-share pre-stored therein, retrieves a fourth key-share 
from a subscriber identity module inserted into the wireless communication device, and receives 
the second key-share from a finance server when a user's credit is verified for use of the content 7 

wh e r e in th e s e curity proc e ssor combin e s the first, s e cond, third and fourth k e y - shar e s to 
d e crypt th e cont e nt . 

19. (Currently Amended) The processing system as claimed in claim 16 wherein the 
measurement parameters comprise at least one of a date-limit, a run-time limit, and an iteration 
limitrand 

wh e r e in th e s e curity proc e ssor portion monitors usage of th e cont e nt with r e sp e ct to th e 
m e asur e m e nt param e t e r s and purges at least on e of th e k e y shares wh e n th e usag e e xc e eds on e 
of th e m e asur e m e nt param e t e rs . 
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20. (Currently Amended) The processing system as claimed in claim 16 further 
comprising an applications processor portion to process applications running on the wireless 
communication device, and wherein the security processo r portion , communications processor 
portion and applications processor portion are part of a processor area and fabricated on an 
application specific integrated circuit (ASIC). 

21. (Currently Amended) A wireless communication device comprising: 

a processor area having a communications processor and security processor, the 
processor area to pre-store a first key-share therein; 

a module receiving area to receive a subscriber identity module (SIM), the SIM having a 
second Jcey-share pre-stored therein; and 

an RF interface to receive a third key-share and encrypted content over a wireless 
communication link in response to a request for content and verification of a user's credit, 

wherein the security processor is to proc e ssor ar e a includ e s apparatus construct e d and 
arrang e d to combine the first, second and third key-shares to decrypt the encrypted content and 
monitor playing of the decrypted content by the communications processor against measurement 
parameters, 

wherein the security processor is to further authenticate the measurement parameters 
using an authentication code to help prevent tampering with the measurement parameters, the 
measurement parameters being secured by the authentication code and provided by a security 
server over the wireless communication link along with the encrypted content, 

wh e r e in th e first, s e cond and third k e y shar e s ar e as s ociat e d with th e us e r and compris e a 
privat e d e cryption k e y of th e us e r , and 

wherein the first key-share is pre-stored in the processor area and the second-key-share is 
pre-stored in the SIM prior to the device generating the request for the content and prior to a 
security server sending the content and the third-key-share to the wireless communication 
device. 

22. (Currently Amended) A wireless communication device as claimed in claim 21 
wherein th e m e asurement parameters hav e an auth e ntication cod e associat e d ther e with and 
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wher e in the security p rocessor «ea purges at least one of the key-shares when usage of the 
content exceeds a service limit indicated by the a measurement parameters, or when the 
authentication code fails to authenticate. 



23. (Previously Presented) A wireless communication device as claimed in claim 21 
wherein the processor area receives the third key-share from a finance server when a user is 
approved for use of the content in accordance with the measurement parameters. 



